?
Solved

What's the difference between Domain Controller Security Settings and Domain Security Settings?

Posted on 2007-12-04
6
Medium Priority
?
1,963 Views
Last Modified: 2012-06-27
What's the difference between Domain Controller Security Settings and Domain Security Settings?
0
Comment
Question by:AnimatorOne
6 Comments
 
LVL 12

Accepted Solution

by:
bhnmi earned 1200 total points
ID: 20406816
One is for the Domain Controllers and the other is domain wide.
0
 
LVL 38

Assisted Solution

by:Shift-3
Shift-3 earned 800 total points
ID: 20406851
Domain Security Settings affect every computer in the domain.  Domain Controller Security Settings only affect machines in the Domain Controllers OU.

Keep in mind that Account Policies (password, lockout, and kerberos settings) must be set at the domain level.  They have no effect if set on a site or OU.

Group Policy is a big and complicated topic.  Here is an introduction:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx
0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 20406867
I am not sure where you see the two, meaning Domain Security and Domain Controller Security, to draft this question? But, it sounds like you are trying to figure out the Domain controller's settings in comparison to the Default Domain Group policy settings.

The domain controller's settings should be one domain controller, when the domain security settings will interact with all domain controllers and clients on your domain.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
LVL 39

Expert Comment

by:ChiefIT
ID: 20406871
Looks like we were all drafting the answer at the same time. Sorry about the redundancy.
0
 

Author Comment

by:AnimatorOne
ID: 20406877
So if you set a DC Permision, it will replicate to other DCs only and if you set the Domain permission it goes out to every PC, Server etc on the domain?
0
 

Author Closing Comment

by:AnimatorOne
ID: 31412695
Thank you!
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question